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In the Claims 



Please cancel claims 1 — 82. 

^J&\ (New) A method, at least partially implemented by a computer, 
comprising: 

building a data block comprising a first random value and a cryptographic 
hash of the first random value; I' 

generating, on a second computing device, a signature by digitally signing a 
string containing a second random value; and 

computing an encryption key, for encrypting the data block, by hashing a 
combination of the signature and a third random value. 

(New) The method as recited in Claim J8#fwherein the second 
computing device is a smart card. 



Jtff (New) The method as recited in Claim^85^wherein the combination 
of the digitally signed string and the third random value comprises the digitally 
signed string concatenated to the third random value. 

^JfT (New) The method as recited in Claim ^3fwherein the combination 
of the digitally signed string and the third random value comprises the third 
random value concatenated to the digitally signed string. 



Lee s Hayets, pllc 



2 



S/N 09/66 1 ,049 Response to Office Action Dated 10/13/2005 

Jtn. (New) The method as recited in ClaimjB, further comprising: 
encrypting the data block using the encryption key; and 
storing the encrypted data block and the second and third random values. 

(New) The method as recited in Claim j#f further comprising: 
accessing the stored encrypted data block and the second and third random 

values; 

providing a string containing the second random value to the second 
computing device; and 

generating, on the second computing device, a second signature by digitally 
signing the string containing the second random value. 

j$T (New) The method as recited in Claim jfrg^ further comprising: 
computing a decryption key using the second signature and the third 
random value; 

decrypting the encrypted data block with the decryption key; and 
comparing the decryption of the encrypted data block to the data block. 

c v ■ 

-9fT (New) The method as recited in Claim-89, wherein computing, the 
decryption key comprises: 

hashing the second signature concatenated to the third random value. 
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l J¥C. (New) The method as recited in Clairn£9f further comprising: 
hashing the first random value contained within the decryption of the 
encrypted data block; and 

comparing the result of this hash with the hash of the first random value 
contained within the decryption of the encrypted data block. 

(New) A method, at least partially implemented by a computer, 

comprising: 

accessing an encrypted data block, wherein the encrypted data block 
comprises an encryption of a combination of a first random value and a hash of the 
first random value; 

accessing second and third random values; 

providing a string containing the second random value to a second 
computing device; 

generating, on the second computing device, a signature by digitally 
signing the string containing the second random value; and 

computing a decryption key, configured to decrypt the encrypted data 
block, wherein computing the decryption key uses the signature generated on the 
second computing device and the third random value. 



^93T (New) The method 




second 



computing device is a smart card. 
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^94. (New) The method as recited in Claim $2, wherein computing the 
decryption key comprises: 

hashing the signature concatenated to the third random value. 



\3> 1° 

^95T (New) The method as recited in Clainb92ff further comprising: 
decrypting the encrypted data block with the decryption key, wherein the 
first random value and the hash of the first random value are recovered by the 
decryption; and 

comparing the first random value and the hash of the first random value 
recovered from the decryption to a data block from which the encrypted data block 
was generated. 



(New) The method as recited in Clairqitf; further comprising: 
hashing the first random value recovered from the decryption of the 
encrypted data block; and 

comparing the result of this hash with the hash of the first random value 
recovered from the decryption of the encrypted data block. 



Lee & Hayes, pllc 



10 

11 

12 
13 
14 
15 
16 
17 
18 



S/N 09/661,049 Response to Office Action Dated 10/13/2005 

^97: (New) One or more computer-readable media comprising computer- 
executable instructions for encryption-based authentication, the computer- 
executable instructions comprising instructions for: 

building a data block comprising a first random value and a cryptographic 
hash of the first random value; 

generating, on a second computing device, a signature by digitally signing a 
string containing a second random value; and 

computing an encryption key, for encrypting the data block, by hashing a 
combination of the signature and a third random value. 



] b 

£%f (New) The one or more computer-readable media as recited in Claim 
iJ^wherein the second computing device is a smart card. 



^ J&T~ (New) The one or more computer-readable media as recited in Claim 
wherein the combination of the digitally signed string and the third random 
value comprises the digitally signed string concatenated to the third random value. 



,Mt(h (New) The one or more computer-readable media as recited jn Claim 

19 -9?^wherein the combination of the digitally signed string and the third random 

20 value comprises the third random value concatenated to the digitally signed string. 
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J#TT* (New) The one or more computer-readable media as recited in Claim 
97, further comprising instructions for: 

encrypting the data block using the encryption key; and 

storing the encrypted data block and the second and third random values. 

v JM*. (New) The one or more computer-readable media as recited in Claim 
J^tfffurtlier comprising instructions for: 

accessing the stored encrypted data block and the second and third random 

values; 

providing a string containing the second random value to the second 
computing device; and 

generating, on the second computing device, a second signature by digitally 
signing the string containing the second random value. 

JJtff (New) The one or more computer-readable media as recited in Claim 
4-027" further comprising instructions for: 

computing a decryption key using the second signature and the third 
random value; 

decrypting the encrypted data block with the decryption key; and 
comparing the decryption of the encrypted data block to the data block. 
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stftfC (New) The one or more computer-readable media as recited in Claim 
Jftfl wherein computing the decryption key comprises instructions for: 

hashing the second signature concatenated to the third random value. 

^ (New) The one or more computer-readable media as recited in Claim 

JA%1 further comprising instructions for: 

hashing the first random value contained within the decryption of the 
encrypted data block; and 

comparing the result of this hash with the hash of the first random value 
contained within the decryption of the encrypted data block. 
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J-QfvT (New) One or more computer-readable media comprising computer- 



executable instructions for encryption-based authentication, the computer- 
executable instructions comprising instructions for: 

accessing an encrypted data block, wherein the encrypted data block 
comprises an encryption of a combination of a first random value and a hash of the 
first random value; 

accessing second and third random values; 

providing a string containing the second random value to a second 
computing device; 

generating, on the second computing device, a signature by digitally 
signing the string containing the second random value; and 

computing a decryption key, configured to decrypt the encrypted data 
block, wherein computing the decryption key uses the signature generated on the 
second computing device and the third random value. 



jXQrTT' (New) The one or more computer-readable media as recited in Claim 



^0JT~ (New) The one or more computer-readable media as recited in Claim 






iO(J7wherein computing the decryption key comprises instructions for: 
hashing the signature concatenated to the third random value. 
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liftf (New) The one or more computer-readable media as recited in Claim 



J4)6T further comprising instructions for: 

decrypting the encrypted data block with the decryption key, wherein the 
first random value and the hash of the first random value are recovered by the 
decryption; and 

comparing the first random value and the hash of the first random value 
recovered from the decryption to a data block from which the encrypted data block 
was generated. 



Jrtff (New) The one or more computer-readable media as recited in Claim 



Jj0§7further comprising instructions for: 

hashing the first random value recovered from the decryption of the 
encrypted data block; and 

comparing the result of this hash with the hash of the first random value 
recovered from the decryption of the encrypted data block. 



-Ht7 (New) A system configured for encryption-based authentication, 
comprising: 

means for building a data block comprising a first random value and a 
cryptographic hash of the first random value; 

means for generating, on a second computing device, a signature by 
digitally signing a string containing a second random value; and 

means for computing an encryption key, for encrypting the data block, by 
hashing a combination of the signature and a third random value. - 
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>*2T (New) The system as recited in Claim >*f, wherein the second 
computing device is a smart card. 

-tT£ (New) The system as recited in Claim wherein the combination 
of the digitally signed string and the third random value comprises the digitally 
signed string concatenated to the third random value. 

-iVC (New) The system as recited in Claim 4+f/wherein th e combination 
of the digitally signed string and the third random value comprises the third 
random value concatenated to the digitally signed string. 

-4+5: (New) The one or more computer-readable media as recited in Claim 
-HI - ; further comprising: 

means for encrypting the data block using the encryption key; and 

means for storing the encrypted data block and the second and third random 

values. 
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J-KT (New) The system as recited in Claim Jr4-5Tfurther comprising: 
means for accessing the stored encrypted data block and the second and 
third random values; 

means for providing a string containing the second random value to the 
second computing device; and 

means for generating, on the second computing device, a second signature 
by digitally signing the string containing the second random value. 



J^rTT (New) The system as recited in Claim J^6f further comprising: 
means for computing a decryption key using the second signature and the 
third random value; 

means for decrypting the encrypted data block with the decryption key; and 
means for comparing the decryption of the encrypted data block to the data 



-W*87 (New) The system as recited in ClaimJ-tTfwherein computing the 
decryption key comprises: 

means for hashing the second signature concatenated to the third random 

value. 





block. 
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means for hashing the first random value contained within the decryption of 
the encrypted data block; and 

means for comparing the result of this hash with the hash of the first 
random value contained within the decryption of the encrypted data block. 



(New) A system configured for encryption-based authentication, 
comprising: 

means for accessing an encrypted data block, wherein the encrypted data 
block comprises an encryption of a combination of a first random value and a hash 
of the first random value; 

means for accessing second and third random values; 

means for providing a string containing the second random value to a 
second computing device; 

means for generating, on the second computing device, a signature by 
digitally signing the string containing the second random value; and 

means for computing a decryption key, configured to decrypt the encrypted 
data block, wherein computing the decryption key uses the signature generated on 
the second computing device and the third random value. 



-t2tT (New) The system media as recited in Claim J2Q^ wherein the 
second computing device is a smart card. 
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(New) The system as recited in Claim >20fwherein computing the 
decryption key comprises: 

means for hashing the signature concatenated to the third random value. 

Vif^C (New) The system as recited in Claim J-20Tfurther comprising: 
means for decrypting the encrypted data block with the decryption key, 

wherein the first random value and the hash of the first random value are 

recovered by the decryption; and 

means for comparing the first random value and the hash of the first 

random value recovered from the decryption to a data block "from which the 

encrypted data block was generated. 

A3a* (New) The system as recited in Claim / t25Tfurther comprising: 
means for hashing the first random value recovered from the decryption of 

the encrypted data block; and 

means for comparing the result of this hash with the hash of the first 

random value recovered from the decryption of the encrypted data block. 



IJ!S & HAYRS, PI.LC 



14 



